Description

Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.

Remediation

References

CVE-2010-5327

Related Vulnerabilities

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2012-2102)

Oracle Database Server CVE-2007-5531 Vulnerability (CVE-2007-5531)

WordPress Plugin 10Web Map Builder for Google Maps SQL Injection (1.0.72)

WordPress Plugin CMS Tree Page View Cross-Site Request Forgery (1.2.4)

WordPress Plugin Maps Widget for Google Maps-Google Maps Builder Cross-Site Scripting (2.30)

Severity

High

Classification

CVE-2010-5327 CWE-264 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Known Vulnerabilities